Telegram Analytics

TGStat хизмати янгиликларидан бохабар бўлиш учун обуна бўл!

SearcheeBot

Telegram-каналлар оламидаги сизнинг йўлбошчингиз.

TGAlertsBot

Каналингиз репостлари ва эсловлари ҳақида хабар беради.

Statistika Saralanganlar

The Bug Bounty Hunter

@thebugbountyhunter

Kanal geosi va tili: Butun dunyo, Inglizcha

Toifa: Dastur va ilovalar

Happy hunting!
thebugbountyhunter.com
hello@thebugbountyhunter.com

Связанные каналы | Похожие каналы

Kanal geosi va tili

Butun dunyo, Inglizcha

Toifa

Dastur va ilovalar

Statistika

Postlar filtri

O‘chirilganlarni yashirish

Repostlarni yashirish

The Bug Bounty Hunter

11 Mar, 15:00

Exploiting Syntax Injection to Extract Data

https://www.youtube.com/watch?v=mVYu_3b_dOE

Exploiting Syntax Injection to Extract Data

👩‍🎓👨‍🎓 Learn about NoSQL injection attacks! The user lookup functionality for this lab is powered by a MongoDB NoSQL database. It is vulnerable to NoSQL injection. To solve the lab, we'll extract the password for the administrator user, then log in to their account. If you're struggling with the co...

520 0 4

The Bug Bounty Hunter

11 Mar, 14:30

How Ethical Hackers ACTUALLY Use ChatGPT With Real Examples

https://www.youtube.com/watch?v=0lq-CokNjSI

How Ethical Hackers ACTUALLY Use ChatGPT With Real Examples

LIKE and SUBSCRIBE with NOTIFICATIONS ON if you enjoyed the video! 👍 📚 If you want to learn bug bounty hunting from me: https://bugbounty.nahamsec.training 💻 If you want to practice some of my free labs and challenges: https://app.hackinghub.io Tired of wasting hours on automation scripts or gett...

755 0 10 2

The Bug Bounty Hunter

11 Mar, 13:00

XXE: A complete guide to exploiting advanced XXE vulnerabilities

https://www.intigriti.com/researchers/blog/hacking-tools/exploiting-advanced-xxe-vulnerabilities

XXE: A complete guide to exploiting advanced XXE vulnerabilities

XML External Entity (XXE) vulnerabilities are one of the most overlooked yet impactful vulnerabilities in modern web applications. Although they've become seemingly harder to detect and exploit, their...

1.1k 1 38

The Bug Bounty Hunter

11 Mar, 10:49

CVE-2025-1094: PostgreSQL SQL Injection Vulnerability - ARMO

https://www.armosec.io/blog/cve-2025-1094-postgresql-sql-injection-vulnerability/

CVE-2025-1094: PostgreSQL SQL Injection Vulnerability - ARMO

Learn about CVE-2025-1094, a critical SQL injection vulnerability in PostgreSQL's escaping functions. Discover affected versions, mitigation strategies, and how to protect your systems.

1.4k 0 20 1

The Bug Bounty Hunter

10 Mar, 12:01

Reversing Samsung’s H-Arx Hypervisor Framework - Part 1

https://dayzerosec.com/blog/2025/03/08/reversing-samsungs-h-arx-hypervisor-part-1.html

Reversing Samsung's H-Arx Hypervisor Framework - Part 1

In many ways, mobile devices lead the security industry when it comes to defense-in-depth and mitigation. Over the years, it has been proven time and again that the kernel cannot be trusted to be secure. As such, there has been effort put into moving secrets (ie. encryption keys) and other sensitive...

2.1k 0 13 2

The Bug Bounty Hunter

10 Mar, 01:58

New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails - elttam

https://www.elttam.com/blog/rails-sqlite-gadget-rce/

New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails - elttam

elttam is a globally recognised, independent information security company, renowned for our advanced technical security assessments.

2.4k 0 16

The Bug Bounty Hunter

10 Mar, 00:53

From Partial IDOR to GPS Tracking — API Flaw Explained

https://infosecwriteups.com/from-partial-idor-to-gps-tracking-api-flaw-explained-5eebab2af32a

From Partial IDOR to GPS Tracking — API Flaw Explained

Hey Infosec buddies! I’m back with an interesting finding from last year. During testing redacted.com, my Spidey Sense kicked in when I…

2.4k 0 20

The Bug Bounty Hunter

8 Mar, 18:03

Reversing Samsung's H-Arx Hypervisor Framework - Part 1

https://dayzerosec.com/blog/2025/03/08/reversing-samsungs-h-arx-hypervisor-part-1.html

Reversing Samsung's H-Arx Hypervisor Framework - Part 1

In many ways, mobile devices lead the security industry when it comes to defense-in-depth and mitigation. Over the years, it has been proven time and again that the kernel cannot be trusted to be secure. As such, there has been effort put into moving secrets (ie. encryption keys) and other sensitive...

2.7k 0 20 2

The Bug Bounty Hunter

8 Mar, 13:45

Latest Nuclei Release v3.3.10!

https://github.com/projectdiscovery/nuclei/releases/tag/v3.3.10

Release v3.3.10 · projectdiscovery/nuclei

What's Changed Other Changes added support to generate CPU & PGO profiles by @dwisiswant0 in #6058 added escape code blocks for markdown formatting by @Ice3man543 in #6089 fixed auth valid...

2.8k 0 16

The Bug Bounty Hunter

8 Mar, 12:30

Vulnerability Reward Program: 2024 in Review

http://security.googleblog.com/2025/03/vulnerability-reward-program-2024-in.html

Vulnerability Reward Program: 2024 in Review

Posted by Dirk Göhmann In 2024, our Vulnerability Reward Program confirmed the ongoing value of engaging with the security research communit...

2.5k 0 9

The Bug Bounty Hunter

7 Mar, 14:53

A very fancy way to obtain RCE on a Solr server

https://www.hacefresko.com/posts/rce-on-solr-server-via-replication

A very fancy way to obtain RCE on a Solr server

2.9k 0 33 4

The Bug Bounty Hunter

7 Mar, 14:00

Latest ReconFTW Release v3.0.0!

https://github.com/six2dez/reconftw/releases/tag/v3.0.0

Release v3.0.0 · six2dez/reconftw

What's Changed Faraday integration for WebUI and reporting Update install.sh - Mantra Install Fix by @tux3d0 in #918 Add --check-tools option and GitHub workflow by @pgrenaud in #920 Fix macos...

2.8k 0 21 1

The Bug Bounty Hunter

7 Mar, 11:00

Exploiting SAAS Misconfigurations

https://www.youtube.com/watch?v=8pzsjgWB8IQ

Exploiting SAAS Misconfigurations

#hacking #bugbounty #bugbountytips #websecurity #infosec #saas

2.7k 0 8

The Bug Bounty Hunter

6 Mar, 18:26

The Burn Notice, Part 2/5 | AI Agents: When Everything Becomes an Attack Surface

https://medium.com/@attias.dor/the-burn-notice-part-2-5-ai-agents-when-everything-becomes-an-attack-surface-bbcece386f02

The Burn Notice, Part 2/5 | AI Agents: When Everything Becomes an Attack Surface

We Manipulated an HR Agent to Betray Its Own Organization and Discovered a Critical Vulnerability in The Process (CVE-2025–26319)

3k 0 15 1

The Bug Bounty Hunter

6 Mar, 17:17

Sitecore: Unsafe Deserialisation Again! (CVE-2025-27218) › Searchlight Cyber

https://slcyber.io/blog/sitecore-unsafe-deserialization-again-cve-2025-27218/

Sitecore: Unsafe Deserialisation Again! (CVE-2025-27218) › Searchlight Cyber

Assetnote, now a searchlight cyber company, has uncovered a zero day REMOTE COMMAND EXECUTION VULNERABILITY in SITECORE EXPERIENCE PLATFORM new Sitecore vulnerabilities discovered

2.7k 0 13 2

The Bug Bounty Hunter

6 Mar, 15:30

Talkie Pwnii #4: Exploiting Punycode Homograph Attacks & Escaping NodeJS VM Module Sandboxes

https://www.youtube.com/watch?v=Js9NEE4cJCs

2.8k 0 8 1

The Bug Bounty Hunter

6 Mar, 10:34

Understanding and Mitigating TOCTOU Vulnerabilities in C# Applications - AFINE - digitally secure

https://afine.com/understanding-and-mitigating-toctou-vulnerabilities-in-c-applications/

Understanding and Mitigating TOCTOU Vulnerabilities in C# Applications - AFINE - digitally secure

In this article, we explore TOCTOU vulnerabilities, subtle yet dangerous race conditions that occur when security checks and resource usage are not tightly coupled. In C# development on Windows, where file operations and dynamic code loading are common, understanding and mitigating these risks is es...

2.8k 0 10 3

The Bug Bounty Hunter

5 Mar, 16:00

Do you know this common Go vulnerability?

https://www.youtube.com/watch?v=wVknDjTgQoo

Do you know this common Go vulnerability?

When auditing code it's crucial to know about common issues. In this video we explore a Go issue that I was not aware of. Learn hacking on https://www.hextree.io/ (ad) 38c3 CTF - Fajny Jagazyn Wartości Kluczy: https://2024.ctf.link/internal/challenge/fb03748d-7e94-4ca2-8998-a5e0ffcbd761/ Unintend...

2.8k 0 30 11

The Bug Bounty Hunter

5 Mar, 15:06

In-store physical Pentest: feedback on a real case study - Hackmosphere

https://www.hackmosphere.fr/in-store-physical-pentest-feedback-on-a-real-case-study/?lang=en

In-store physical Pentest: feedback on a real case study - Hackmosphere

A physical pentest carried out in a furniture store uncovered several major security vulnerabilities.

2.9k 0 12

The Bug Bounty Hunter

5 Mar, 15:05

New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails - elttam

https://www.elttam.com/blog/rails-sqlite-gadget-rce/

New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails - elttam

elttam is a globally recognised, independent information security company, renowned for our advanced technical security assessments.

2.8k 0 7

20 ta oxirgi post ko‘rsatilgan.

42 466

obunachilar

Kanal statistikasi

Kanalda mashhur

Hacking High-Profile Bug Bounty Targets: Deep Dive into a Client-Side Chain https://vitorfalcao....

Announcing our new cohost... (Ep. 106) https://www.youtube.com/watch?v=3rkg1CUDpjA

Achieving RCE in famous Japanese chat tool with an obsolete Electron feature https://flatt.tech/...

Tomorrow our #WCAsia Capture The Flag starts. If you're into WordPress security challenges you sh...

Nginx/Apache Path Confusion to Auth Bypass in PAN-OS (CVE-2025-0108) › Searchlight Cyber https:/...